共收录 5345 条相关情报。
← 返回所有主题CVE-2026-100515
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Photo R
CVE-2026-100509
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webful Creations R
CVE-2026-42700
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Image Sli
CVE-2026-105630
Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, includ
CVE-2026-104979
Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes
CVE-2026-102576
A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cros
CVE-2026-102295
A flaw was found in Quay. A cross-site scripting (XSS) vulnerability in the OAuth callback handler allows a remote attac
CVE-2025-15643
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jose Fernandez Ads
CVE-2026-105630
Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, includ
CVE-2026-104979
Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes
CVE-2026-105397
LearnPress plugin for WordPress through 4.4.9.1 contains a stored cross-site scripting vulnerability that allows authent
CVE-2026-102426
Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6
CVE-2026-59788
The email media type OAuth form passes the Authorization endpoint value to window.open() without validating the URL sche
CVE-2026-105291
A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController
CVE-2026-105289
A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialchars_deco
CVE-2026-105288
A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexCon
CVE-2026-105069
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikki Blight QR Re
CVE-2026-105060
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Logo S
CVE-2026-105056
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerc
CVE-2026-104808
DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious us